About ComplyDP

ComplyDP is a lawyer-led privacy compliance company helping Indian businesses meet the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. We combine a compliance platform with hands-on legal advisory, and work with clients ranging from high-growth startups to SEBI-regulated financial services groups and large manufacturing enterprises. We are a small, rapid-moving team in Bengaluru where legal and engineering sit side by side.

The Role

We are hiring Privacy Lawyer to lead DPDP engagements for our enterprise clients end to end. You will own the legal side of each engagement, from gap assessment to remediation, front client conversations with general counsel and compliance heads, and work directly with our engineering team to turn legal obligations into product logic. This is a builder’s role: you will shape how ComplyDP delivers privacy compliance at scale.

What you will do

- Lead DPDP gap assessments and remediation plans for enterprise clients, including multi-entity groups
- Draft and review privacy notices, consent language, data processing agreements, vendor and processor clauses, and internal policies
- Map processing activities and identify legitimate uses, consent requirements and cross-border transfer considerations
- Design and own DPR (Data Principal Request) and personal data breach response playbooks for each client
- Work with engineering to encode DPDP obligations into the ComplyDP platform
- Track regulatory developments under DPDP and sectoral overlaps (SEBI, RBI, IFSCA) and update client advice




- Support sales on legal questions during client scoping
- Review work of and mentor junior associates as the team grows

What we are looking for

- 4 to 8 years of experience in corporate advisory, regulatory or in-house legal roles (not purely litigation)
- Strong working knowledge of the DPDP Act and Rules: consent and notice, legitimate uses, Significant Data Fiduciary obligations, DPR timelines and breach reporting
- Excellent drafting skills and the confidence to lead calls with senior client stakeholders
- Comfort working with technical teams and reading data flows

Good to have

- Experience with BFSI or capital markets clients, or regulatory exposure to SEBI, RBI or IFSCA
- GDPR or cross-border data transfer experience
- In-house privacy experience at a tech or fintech company, or time in a Big 4 privacy or risk practice
- CIPP/E, CIPP/A or a similar certification (we will support you in getting one)

Why join

- Lead real enterprise engagements from day one, not just research memos
- Build at the intersection of law and technology in one of the most important new areas of Indian regulation
- Work directly with the founders, both with legal and product backgrounds
- Competitive compensation, plus support for certifications and professional development

Location: Bengaluru, with travel to client sites in Mumbai and Delhi as needed

- Hiring process: Intro call, a short paid drafting exercise reviewing a privacy notice against DPDP, then a conversation with the founders.

📌 Data Privacy Specialist (Bengaluru)
🏢 ComplyDP
📍 Bengaluru